$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa File: cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa (raw, json) Hash identifier: juivLSxfS1J/J1N6w4y0vXUZRfMWMWFQ0LokcuJg690= Subject key identifier: 3F:18:11:CA:8D:82:E1:CF:E9:7A:85:91:07:1F:42:EB:88:7B:D3:DE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F02422C0E22654ED96538BC80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 20940 IP address blocks: 198.173.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:2c:0e:22:65:4e:d9:65:38:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=d2772c39-de11-4690-83e3-8a45df35943c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:1c:c1:ea:45:26:c5:8e:43:7d:b5:a2:d0: 8a:04:df:0a:64:b4:1c:44:45:03:7e:77:9a:54:04: 45:67:c5:b4:8a:e9:3d:af:f6:92:57:42:33:6e:f2: 58:e3:e4:6c:65:a2:49:cb:d5:ea:86:f2:33:39:5d: 1b:08:14:80:ce:ad:31:6e:09:f9:b9:cc:bc:90:a6: 3c:d8:35:84:db:d6:dd:21:7e:68:62:40:3b:1f:b0: db:d4:3b:a1:58:11:7c:8a:ec:2f:d7:c0:24:f4:07: d8:e6:f1:67:c3:ff:41:28:39:c0:62:72:43:7d:cf: b7:d4:5d:21:13:ba:9d:1e:82:3b:b9:77:d1:5f:9e: bb:5f:53:bb:7d:7f:08:82:af:51:08:be:13:17:78: fe:fe:45:40:95:a3:7d:78:4b:a9:0a:1b:2b:9c:2f: 74:ed:c7:06:dd:2b:b0:e8:57:ee:dd:65:3a:21:a4: c0:15:d0:62:a8:26:d4:98:a2:27:8f:e7:ad:cf:02: da:72:f1:7d:94:78:a5:47:cd:1b:a2:90:67:05:f6: 6d:6c:1f:18:64:43:26:2c:8e:07:d3:7c:d8:b7:03: 51:79:ce:35:78:77:5d:8d:43:55:14:c0:24:3c:40: 57:02:a1:82:53:a1:2f:16:b8:5d:b0:db:7f:d2:5d: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:11:CA:8D:82:E1:CF:E9:7A:85:91:07:1F:42:EB:88:7B:D3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.173.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2c:ba:d1:5a:67:96:a9:b1:2f:b2:38:99:b2:45:cc:d9:44: 55:33:03:5b:26:d0:9c:3c:19:7b:c6:17:f9:c8:94:01:19:8e: 3f:a5:a9:22:5a:3d:fb:f3:23:45:ab:a8:6f:94:60:6c:5f:a5: 85:0f:9b:b4:aa:72:86:b3:67:ba:11:1d:c9:18:6b:88:92:c6: 4f:cf:35:d5:fb:4e:b4:74:4a:5a:e7:f5:02:ca:d8:09:11:6d: b2:9e:bf:ba:7d:27:06:24:91:63:08:89:95:60:4b:69:ba:bb: 06:3c:a3:52:4d:c3:cf:50:88:73:b4:1c:a8:3c:f3:99:8b:a6: 1e:0c:5c:60:1f:30:42:bf:d9:2b:e3:b9:02:81:87:22:75:cd: 95:5f:6e:67:9b:81:32:78:a1:52:35:31:51:81:bb:28:8e:7f: f3:75:88:20:e6:bd:4e:a2:9b:6f:e7:7f:43:d8:ad:6a:78:96: fb:78:cc:37:38:c2:65:e6:dd:39:2c:9a:78:81:4a:8f:3d:6f: b9:6e:be:d1:1a:68:31:02:6c:1d:8d:9c:2d:6c:2f:fe:1b:73: cd:51:d4:06:9d:7a:b5:0e:36:c0:bf:d1:6d:89:56:df:99:5f: 63:54:97:4a:fe:a6:a9:98:c4:18:58:d1:29:75:d4:27:08:a0: 12:4b:03:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiwOImVO2WU4vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZDI3NzJjMzktZGUxMS00NjkwLTgzZTMtOGE0NWRmMzU5NDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47McwepFJsWOQ321otCKBN8KZLQcREUDfnea VARFZ8W0iuk9r/aSV0IzbvJY4+RsZaJJy9XqhvIzOV0bCBSAzq0xbgn5ucy8kKY8 2DWE29bdIX5oYkA7H7Db1DuhWBF8iuwv18Ak9AfY5vFnw/9BKDnAYnJDfc+31F0h E7qdHoI7uXfRX567X1O7fX8Igq9RCL4TF3j+/kVAlaN9eEupChsrnC907ccG3Suw 6Ffu3WU6IaTAFdBiqCbUmKInj+etzwLacvF9lHilR80bopBnBfZtbB8YZEMmLI4H 03zYtwNRec41eHddjUNVFMAkPEBXAqGCU6EvFrhdsNt/0l0R9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8YEcqNguHP6XqFkQcfQuuIe9PeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2Q4Y2ExYzMtNDc2ZS0z MGUzLThkZGYtOTg2M2RhYjUzODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxq2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAssutFaZ5apsS+yOJmyRczZRFUzA1sm0Jw8GXvGF/nIlAEZjj+lqSJa PfvzI0WrqG+UYGxfpYUPm7SqcoazZ7oRHckYa4iSxk/PNdX7TrR0Slrn9QLK2AkR bbKev7p9JwYkkWMIiZVgS2m6uwY8o1JNw89QiHO0HKg885mLph4MXGAfMEK/2Svj uQKBhyJ1zZVfbmebgTJ4oVI1MVGBuyiOf/N1iCDmvU6im2/nf0PYrWp4lvt4zDc4 wmXm3TksmniBSo89b7luvtEaaDECbB2NnC1sL/4bc81R1AaderUONsC/0W2JVt+Z X2NUl0r+pqmYxBhY0Sl11CcIoBJLA/w= -----END CERTIFICATE-----Generated at Thu Sep 3 12:58:55 2026 by rpki-client